mobile icon indicating copy to clipboard operation
mobile copied to clipboard

F-Droid Reproducible Builds

Open ldeso opened this issue 8 months ago • 1 comments

If the app is to be included in the F-Droid repository in the future (#686), it would be nice to have reproducible builds.

Here are a few things that are required for F-Droid to be able to reproduce the builds:

  • [x] when publishing a release on GitHub, attaching an APK built from the corresponding tag
  • [x] naming this APK file consistently (it is currently app-release{versionCode}.apk)
  • [ ] adding the Flutter repo as a submodule (pointing to the latest commit of the beta branch)
  • [ ] using this Flutter submodule when building the APK

Here is an example of an app implementing the Flutter submodule approach: https://github.com/amake/orgro


Although not required by F-Droid, it might also be worth it to add the following in the file build.gradle:

android {
    …

    dependenciesInfo {
        includeInApk false
    }
}

This removes the Dependency Info Block from the APK, which is an encrypted proprietary blob from Google that is not reproducible.

Edit: the Dependency Info Block was removed by merging #746.

ldeso avatar Jun 07 '24 06:06 ldeso